HSTS is not enabled for first-time visitors: https://hstspreload.org/?domain=rustup.rs
_Originally posted by @Darkspirit in https://github.com/rust-lang/rustup.rs/issues/180#issuecomment-529508786_
What more do we need to solve this? Is it worth it if we're considering migrating the website to rust-lang.org ?
@pietroalbini how're we feeling about rustup.rs vs install.rust-lang.org or get.rust-lang.org or similar?
Is there some reason to change?
The .rs suffix has (or had) problematic management IIRC.
We can do that separately to hsts pining and or certificate inclusion though...
Most helpful comment
What more do we need to solve this? Is it worth it if we're considering migrating the website to
rust-lang.org?